Posts on Security With Ian

Nibbles - Hack the Box

Wed, 02 Sep 2026 00:00:00 +0000

Difficulty: Easy

OS: Linux

Date Completed: 2026-09-02

Write-up Authored by: Ian Simons

Challenge Created by: mrb3n8132

Core Competencies:

Network Enumeration with Nmap
Manual Web Enumeration
Web Enumeration with Gobuster
Vulnerability Research
Initial Access with Metasploit
Privilege Enumeration
Privilege Escalation

Overview

This Box was completed as part of the Hack the Box Academy Job Role Path “Penetration Tester” in the “Getting Started” Module. The purpose of completing this box is to build familiarity with the Hack the Box platform. While the Academy module walks the user through this Box, I opted to complete it on my own using my existing, albeit limited, skillset. Additionally, this was another opportunity to sharpen my Metasploit fundamentals. Note: Flags documented in Appendix B

Jerry - Hack the Box

Sun, 30 Aug 2026 00:00:00 +0000

Difficulty: Easy

OS: Windows

Date Completed: 2026-08-30

Write-up Authored by: Ian Simons

Challenge Created by: mrh4sh

Core Competencies:

Network Enumeration with Nmap
Vulnerability Research
Brute Forcing with Metasploit
Exploitation with Metasploit
Web Enumeration with gobuster

Overview

This box was recommended by the Hack the Box Academy Job Role Path “Penetration Tester” in the “Getting Started” Module. The purpose of completing this box is to build familiarity with Metasploit. As we will see, it did just that. Note: Flags documented in Appendix B

Granny - Hack the Box

Thu, 27 Aug 2026 00:00:00 +0000

Difficulty: Easy

OS: Windows

Date Completed: 2026-08-27

Write-up Authored by: Ian Simons

Challenge Created by: ch4p

Core Competencies:

Network Enumeration with Nmap
Vulnerability Research
Initial Access with Metasploit
Vulnerability Scanning with Metasploit
Privilege Escalation with Metasploit

Overview

This Box was recommended by the Hack the Box Academy Job Role Path “Penetration Tester” in the “Getting Started” Module. The purpose of completing this box is to build familiarity with Metasploit. As we will see it did just that. Note: Flags documented in Appendix B